Incident Response – Page 3 – Computer Security Articles

Time keeps on slippin’ slippin’ slippin’: The 2023 Active Adversary Report for Tech Leaders

August 23, 2023 admin active adversary report, Active Directory, attribution, detection, dwell time, Featured, Incident Response, mfa, mtr, RDP, sophos x-ops, threat research

Credit to Author: Angela Gunn| Date: Wed, 23 Aug 2023 10:01:02 +0000

A deep dive into incident-response cases from the first half of this year finds both attackers and defenders picking up the pace

Security Sophos

Understanding the New SEC Cybersecurity Rules: A Guide for Executives

July 31, 2023 admin Compliance, grc, Incident Response, SEC, security operations

Credit to Author: gallagherseanm| Date: Mon, 31 Jul 2023 10:00:38 +0000

The new SEC cybersecurity rules significantly enhance disclosure requirements, emphasize the board’s role in risk management, and introduce a stringent four-day reporting timeline, necessitating that public companies bolster their cybersecurity strategies, improve incident response processes, and ensure robust communication plans are in place.

Security Sophos

Akira Ransomware is “bringin’ 1988 back”

May 11, 2023 admin akira, Featured, Incident Response, ransomware, security operations, sophos xdr, threat research

Credit to Author: gallagherseanm| Date: Tue, 09 May 2023 20:27:03 +0000

A new recently observed ransomware family dubbed Akira uses a retro aesthetic on their victim site very reminiscent of the 1980s green screen consoles and possibly takes its namesake from the popular 1988 anime film of the same name.

Security Sophos

Everything Everywhere All At Once: The 2023 Active Adversary Report for Business Leaders

April 25, 2023 admin active adversary playbook, CoinMiner, conti, data breach, exfiltration, extortion, Featured, Incident Response, loader, lockbit, ransomware, sophos x-ops, threat research, web shells

Credit to Author: Angela Gunn| Date: Tue, 25 Apr 2023 10:00:03 +0000

A deep dive into over 150 incident-response cases reveals both attackers and defenders picking up the pace

Microsoft Security

Token tactics: How to prevent, detect, and respond to cloud token theft

November 16, 2022 admin cloud token theft, cybersecurity, Identity and access management, Incident Response, microsoft detection and response team (dart), Microsoft security intelligence, Threat protection

Credit to Author: Paul Oliveria| Date: Wed, 16 Nov 2022 16:00:00 +0000

As organizations increase their coverage of multifactor authentication (MFA), threat actors have begun to move to more sophisticated techniques to allow them to compromise corporate resources without needing to satisfy MFA. Recently, the Microsoft Detection and Response Team (DART) has seen an increase in attackers utilizing token theft for this purpose.

The post Token tactics: How to prevent, detect, and respond to cloud token theft appeared first on Microsoft Security Blog.

Kaspersky Security

Findings and tips from the GERT report | Kaspersky official blog

September 6, 2022 admin Business, enterprise, gert, Incident Response

Credit to Author: Kaspersky Team| Date: Tue, 06 Sep 2022 23:21:27 +0000

Tips and key findings from the Kaspersky Global Emergency Response Team (GERT) report.

Security Sophos

Rapid Response: The Ngrok Incident Guide

July 14, 2022 admin Incident Response, mtr•rapid response, ngrok, SophosLabs Uncut, threat research

Credit to Author: Angela Gunn| Date: Thu, 14 Jul 2022 08:01:51 +0000

Ngrok is a legitimate remote-access tool. It is regularly abused by attackers, who use its capabilities and reputation to maneuver while bypassing network protections. This incident guide shows Security Operations Centers (SOCs) and response teams how to detect and respond to the suspicious presence or use of ngrok on the network.

Kaspersky Security

How to upgrade an incident response specialist’s skills

May 20, 2022 admin Business, enterprise, Incident Response, trainings, xtraining

Credit to Author: Hugh Aver| Date: Fri, 20 May 2022 20:02:10 +0000

Kaspersky released an online course to improve an incident response specialist’s expert skills